Live › vulnerability › CVE-2026-120436
Netpbm's jbigtopnm tool miscalculates an output buffer size when converting a crafted multi-plane JBIG file, causing a heap buffer overflow. An attacker who gets a malicious JBIG file processed can crash the tool or potentially execute code.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-11-02 15:24 UTC. All times on this page are UTC.
Exposure requires that jbigtopnm processes JBIG files from an untrusted source, such as a file upload or conversion service. Systems that only convert files they create themselves, or that do not have Netpbm installed, are not meaningfully exposed. The sources do not say which default configurations ship the tool enabled.
No product ranges from the sources yet.
pnmcat --version or your package manager (for example dpkg -l netpbm); compare against the fixed ranges below.jbigtopnm is installed and whether anything feeds it untrusted JBIG files.10.86.51 or later in the 10.x line11.02.30 or later in the 11.02 line11.15.08 or later for the 11.03 lineEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
Netpbm before 10.86.51, 11.x before 11.02.30, and 11.03 before 11.15.08 contains an integer overflow in jbigtopnm that causes heap buffer overflow when computing output buffer size. Attackers can supply a crafted multi-plane JBIG file with large header dimensions so jbg_dec_merge_planes() overflows the undersized buffer, causing crashes or potentially code execution.
This page as .md · .json · in your agent: get_signal("CVE-2026-120436")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.